cockroachdb / cockroachdb/cockroach
sql: Subexpression support within RLS expressions
Open
A-sql-privileges
C-enhancement
T-sql-foundations
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
When we initially implemented row-level security (RLS), we intentionally kept the scope limited by only supporting simple expressions. This issue tracks the work to support more complex expressions in RLS policies, allowing for the inclusion of subexpressions. This approach is consistent with postgres. Implementing this will likely require additional optimizer logic to generate an efficient execution plan.
Jira issue: CRDB-46422
Epic CRDB-52152
Contributor guide
Assessment
This issue has not been assessed yet.